Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
101 9.9 緊急
Network
traefik traefik traefikにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御
CVE-2026-44774 2026-05-21 10:51 2026-05-15 Show GitHub Exploit DB Packet Storm
102 6.5 警告
Network
Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおける認可に関する脆弱性 New CWE-285
不適切な認可
CVE-2026-45187 2026-05-21 10:50 2026-05-19 Show GitHub Exploit DB Packet Storm
103 5.4 警告
Network
openwebui open webui openwebuiのopen webuiにおける動的に決定されたオブジェクト属性の不適切に制御された変更に関する脆弱性 New CWE-915
動的に決定されたオブジェクト属性の不適切に制御された変更
CVE-2026-45396 2026-05-21 10:50 2026-05-15 Show GitHub Exploit DB Packet Storm
104 5.3 警告
Network
openwebui open webui openwebuiのopen webuiにおける重要な機能に対する認証の欠如に関する脆弱性 New CWE-306
重要な機能に対する認証の欠如 解説
CVE-2026-45397 2026-05-21 10:50 2026-05-15 Show GitHub Exploit DB Packet Storm
105 7.5 重要
Network
openwebui open webui openwebuiのopen webuiにおけるユーザ制御の鍵による認証回避に関する脆弱性 New CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-45398 2026-05-21 10:50 2026-05-15 Show GitHub Exploit DB Packet Storm
106 8.5 重要
Network
openwebui open webui openwebuiのopen webuiにおけるサーバサイドのリクエストフォージェリの脆弱性 New CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-45400 2026-05-21 10:50 2026-05-15 Show GitHub Exploit DB Packet Storm
107 8.5 重要
Network
openwebui open webui openwebuiのopen webuiにおけるサーバサイドのリクエストフォージェリの脆弱性 New CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-45401 2026-05-21 10:50 2026-05-15 Show GitHub Exploit DB Packet Storm
108 8.8 重要
Network
Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおける認証に関する脆弱性 New CWE-287
不適切な認証
CVE-2026-45434 2026-05-21 10:50 2026-05-19 Show GitHub Exploit DB Packet Storm
109 5.4 警告
Network
Outlook.com Microsoft Edge Chromium Microsoft Edge (Chrome ベース) のセキュリティ機能のバイパスの脆弱性 New CWE-20
CWE-noinfo
CVE-2026-45492 2026-05-21 10:50 2026-05-18 Show GitHub Exploit DB Packet Storm
110 6.1 警告
Network
Outlook.com Microsoft Edge Chromium Microsoft Edge (Chromium ベース) のなりすましの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-45494 2026-05-21 10:50 2026-05-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311741 - - - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. - CVE-2024-40616 2024-10-15 00:15 2024-10-15 Show GitHub Exploit DB Packet Storm
311742 6.5 MEDIUM
Network
adobe commerce
magento
commerce_b2b
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. A low-privileged attacke… CWE-863
 Incorrect Authorization
CVE-2024-45132 2024-10-14 20:15 2024-10-10 Show GitHub Exploit DB Packet Storm
311743 5.4 MEDIUM
Network
adobe commerce
magento
commerce_b2b
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged at… CWE-863
 Incorrect Authorization
CVE-2024-45131 2024-10-14 20:15 2024-10-10 Show GitHub Exploit DB Packet Storm
311744 5.4 MEDIUM
Network
adobe commerce
magento
commerce_b2b
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged at… CWE-863
 Incorrect Authorization
CVE-2024-45128 2024-10-14 20:15 2024-10-10 Show GitHub Exploit DB Packet Storm
311745 - - - ** UNSUPPORTED WHEN ASSIGNED ** This vulnerability exists in D3D Security IP Camera D8801 due to usage of insecure Real-Time Streaming Protocol (RTSP) version for live video streaming. A remote atta… CWE-862
 Missing Authorization
CVE-2024-47790 2024-10-14 20:15 2024-10-4 Show GitHub Exploit DB Packet Storm
311746 - - - ** UNSUPPORTED WHEN ASSIGNED ** This vulnerability exists in D3D Security IP Camera D8801 due to usage of weak authentication scheme of the HTTP header protocol where authorization tag contain a Base… CWE-319
Cleartext Transmission of Sensitive Information
CVE-2024-47789 2024-10-14 20:15 2024-10-4 Show GitHub Exploit DB Packet Storm
311747 - - - Local File Inclusion vulnerability in pretix Widget WordPress plugin pretix-widget on Windows allows PHP Local File Inclusion. This issue affects pretix Widget WordPress plugin: from 1.0.0 through 1.… - CVE-2024-9575 2024-10-14 17:15 2024-10-9 Show GitHub Exploit DB Packet Storm
311748 7.5 HIGH
Network
haproxy haproxy HAProxy 2.9.x before 2.9.10, 3.0.x before 3.0.4, and 3.1.x through 3.1-dev6 allows a remote denial of service for HTTP/2 zero-copy forwarding (h2_send loop) under a certain set of conditions, as expl… NVD-CWE-noinfo
CVE-2024-45506 2024-10-14 12:15 2024-09-5 Show GitHub Exploit DB Packet Storm
311749 4.3 MEDIUM
Network
adobe commerce
magento
commerce_b2b
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged a… NVD-CWE-noinfo
CVE-2024-45149 2024-10-12 07:12 2024-10-10 Show GitHub Exploit DB Packet Storm
311750 2.7 LOW
Network
adobe commerce
magento
commerce_b2b
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An admin attacker … NVD-CWE-noinfo
CVE-2024-45135 2024-10-12 07:12 2024-10-10 Show GitHub Exploit DB Packet Storm